By this I mean, if we pass a player's session ticket to another device via our servers, I assume it would be invalid? The player would need to be logged into the device to get a session ticket for that device.
Correct?
I am just exploring how things work as I look at designs for a new game feature.
No, Session Ticket is not device specific. But we suggest not passing it directly through devices due to safety concerns.
Playfab APIs use RESTful API, which is stateless. When you use API calls, there is a parameter named “X-Authentication” in the header where Session Ticket is required. It better to use our Postman collections to learn its usages. Please see Executing the PlayFab API via Postman to learn how to use postman.
It should be emphasized that storing Session Ticket locally may have potential security problems. please think twice to ensure the security before applying this strategy.
Understood about the security issue. I am a little surprised they are not device specific. I have no idea how we are going to design this new feature yet. It is just good to understand the system the best I can as I design. :-)
3 People are following this question.
